spamhaus / spamassassin-dqs

Spamhaus code for the Spamassassin plugin. See https://docs.spamhaustech.com/40-real-world-usage/SpamAssassin/000-intro.html
Apache License 2.0
54 stars 16 forks source link

https://github.com/spamhaus/spamassassin-dqs/blob/master/sh.cf#L23 #11

Closed xpunkt closed 5 years ago

xpunkt commented 5 years ago

this rule and others expose dqs key in reports

possible workaround is to make it a meta rule

if it can be solved in plugin it would be preferelble

ricalfieri commented 5 years ago

You are right, the key is leaked in reports. Unfortunately this cann't be solved in the plugin, but as you suggested I added meta rules for the RCVD_* family and verified that the key is not leaked anymore Let me know how it works for you

ricalfieri commented 5 years ago

working as expected